Threats tagged 'ghsa-m5xj-m267-336w'

SourceCodester Company Website CMS 1.0 contains a SQL injection vulnerability in the /admin/index.php file. This vulnerability allows remote attackers to manipulate the Username argument to execute unauthorized SQL commands. The vulnerability has a CVSS score of 7.3, indicating high severity, and public exploit code has been disclosed.